Credential harvesting and escalation attacks
Credential harvesting is the process of identifying the usernames, passwords, and hashes that can be utilized to achieve the objective set by the organization for a penetration testing/red team exercise activity. In this section, we will walk through three different types of credential harvesting mechanism that are typically used by attackers who use Kali Linux.
Password sniffers
Password sniffers are the set of tools/scripts that typically perform man-in-the-middle attacks by discovery, spoofing, sniffing the traffic, and by proxying.
In this section, we will explore BetterCap to capture the SSL traffic on the network so that we can capture the credentials of the network users.
BetterCap is similar to the ettercap of the previous generation, with the additional capabilities of performing network-level spoofing and sniffing. It can be downloaded to Kali Linux by running apt-get install bettercap from the Terminal.
The core options of BetterCap are...
